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fcmm-tZXV ->-IExE5r*&iS , )Lfcy y-* K3-^y V 
K£. 

HUH* t>mJlEx-^ 7 7 MZT 9 ± fc«> ©7 if 
-trxg#£gltttltT, mfisy y-x K*^y >- M><b 

worn &ivtcmi&# y v— faig*^ mm* y v'-fHffi 

A. 

J: 9 8MB* fc ttH5WS^TIBT?S> 5 £ mm £ tufcmllS* 
U 

mJlB^K y v'-ffffilt, ftUfrib&VttVZTmx 

huibjk y ->-sMB*a*» & wet 9 ± ^mm^M-r 5 r 

©W^fflfft 3 \Zs&m<D 



7*£, 

y y £ Sr-^tf r t £ I" 5 T * * 7. 'r6>J flp^ife. 

5xf -y^t Sr^tf r i: ^#mi:i--5»*3S5 tc|E«(D 

[it*«8] BuiE^'y^-sExS^w^^s-rsfc 

7*£ Sr^tf i £ SrWRt-f-5»**6 KHE«©T^-fe^ 
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MWm% ii^S fc li^E Srff 5 tf> ic&g fc T 9 ir 

;*g#lc:#i-5T^;*|^©0^£gttfc*§-g-l^ mr 
T'i £#tf r 1 t -i-zmXm 8 lcE*i©T * ir * 

fl-gB^^a©^— * 7 r ^ ? fcft©7 

ffim&ft&m&^ztcfrvmmtmntzivrcmz. wis 

ittFE# y V-Efc*©&fl:««a-t-5fc«>©*HBas|WT 

l£<fc9, BJra©^— ^77-f^W>f>> HufE^yv—E 
xS*©3b#tcg^T##^£ fcttJCJESrtT 5 x-* 

siJE*£ fc Srff 5 fc * Ic&Slfc T 9 ir * £ 

mliS*^ a.** fc f±^K *Vt b fc«> (c&gft MET 9 ir 

Ex- 9 S5#^©Si* fi^H 3: Sff AJ9 t 

fl-lfM»£>BiTa©x— * 7 y -f /Her ? -fe^-f 5 tc$><DT 
^T-fc^x-^fcMitftftfe.Hfc^y v— Ei£SrI&# 



sWE*fl : **a-t-5fc»i>©tea«s»fT^rtB-e*>s 
± * g# -^fF "i-r s d»5 *>£ftai-2> «a t 

t-«ty. 0Ta©'7 ? -^7r'i'/i'4 J ^?>, SfrlEJKyv— e 

$r 3 v tr a. - ^ ^utT 5 t Sr^m t -r z> mxm 1 

2 IcEs&O^n ^9 Afe^R 

0 ! mLTSfrE*# : lrffiSi-5fcft©ftiaSr*tT$-&5# 
St. 

WE*#SrSIJ£-t-5fc«)©«ia*5|lfT$ttfc^^, Wi 
ET ^ ir^S^tc^f L-TT 9 ±x Srff "I-f-^ fg t 3r<» 
5 i ?:<^m t "f 5 T * ir ^©J^l x A„ 

* y ->-ExBS:t&lfii-5 t , 

stiE^ y ->-ExE^Sc-t-SFfa©T ^ ir x^SrSlt 

W^fc^g-Jc, BuE£#£?iJ£1-3fc«>©, 

iSr^m UTHllE^#Srmai-5 fc*©tea^Htr 




r b &%fmt-tZ,T?±xttmi/x ; r A„ 

■fe^JBHi*r»#atfftaftff 5««#***»if 

^«|g*s*>5i*iJ»fLfc#^^, Stem 

±*B$<D9 J y?*;T 9-t*mMb UT^iitr 
1ST 9 -fe^ H*tC*f LTT ^ -fe^ SrfF "I-T 5 #S £ Srfit 

*i;:BB*t-3#y f-fE^fcte^Lfcy y-* k*»* 

ft-Ufrhtii^-r— 9 7 t4 MZ.T 9 ir tctb(DT 9 

«b*Wc7K y ^-EJ6«r* 9 m r. t K «t 

9, ^^T^-fe^^*SrffBli-5^5^Sri*:^-t--5jHy 

St9ffi^HfcH>ifH^y v—IExEttc x H«S5^y->-W« 
[000 1] 
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[0 0 0 2] 

{C*3lt5^y ->-05iExg^at ATTOKeyNot 
es [BFIK99] (PolicyMaker [BRL96] ) v GACL [WL93] [W 
L98L ASL []SSb97]t£b*fr$Siibft,X\ / ^, T9±W»l 

g£*j;irt-5fc*<D/i'— /v-c-fcs, ctvbro^y v— is 
^i±. ^-ftttr^-fe^ • 3 v ho- )v • y h (ac 

L) bVf&ixZ (Subj, Obj, Op) ©3offly ;* K£g 
jfcfcUCt^. r*U±, T^-feXCT)^ (subj) &T9 
±^<DM^. (Obj) C^LT, hZWift (Op) jWff&h, 

[0003] ±|E<D# y v— |Si6#a-C(±, H jx^ffilft 
fc#>t£, ACL(Subj, Obj, Op) ^Cond(Subj, Obj. Op) b 

mm^x it s *> ^ 3 a c l 

T^y v'-Srtt^CLTfct, ^©^IC^a-t-^T^ 
^Xfi*tJt£C-r S A C L bfc>65 oTT ^ -fe 

[0 0 0 4] Sfc, ACL(C*J(t5Mffl)*f-*W^(DfB 

SrfBxE-e#5t©T'$)5. HU#(±K1fl:#'E»i (Closed w 
orld Assumption) 4: i ^Klffl^ btlZ* gfltt^tftT? 
tt, fcST^ir^^ti^tLT. ^tvKStJK-rSACL 

5„ LfciSot, ACL{cfF^^^fctt5rte5ELT 
T^-fe^.^ASACL©if©^>'hy{ct,-a-®:L 

GACL& t*»CffiV ^ f>tbX V * 5 ?^#)& A©aM^as*g^ 
* tlX l^i l/^PS 9 , tftf^SrfW 1 1 fcDefaultJiffedJ 

[0005] #y ->-©pffi*feicr 5 bfcM^ttfc^ 

Ott), KmX?~ACL (subj, obj, op) 
ft LT 1 *fc»±0 ©V-'-f tb^<Dflt^iS5o 
[0 0 0 6] 

IISMj»s^LJ;5 4:i-5^®] ±^LfcJ;5tc, ^3fc 
©T^-fe7;$iJp^*5»t57Ky V— ©fMBftHftt» T^-fe 
^»*fc»bT*y >>"-SrffHliUfc*S*SrY e s Sfcll 
No(D2ffl[<D^-rtv^4: U^5. -f-/«C*5*), T9±* 

fc*s-e#*v\ irofefe. fc^*#SriSfc*fiY e s 

(Yes with condition) 1 1/ ^ 5 J: 5 tefc^&'ff 5 ^ i: d s 
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[0 0 0 7] Z.<Otc#>, f-^©B&^7d— ry h 

[0008] *3g!H(4£A±© J; 5 &i£ffi#>!£«£ft?8H- 
Sr^J»f-t-5 fctt "Cafe < , hZ&WZffitclttf T 
[0 0 0 9] JEfc* tkfttfZnTf-txff-iWCio^XW 

[0 0 10] 

[Sig$rj&ft-t-5fc*<^J&] a^SgiftcDfci. *H 

# y v—ie^^ t- . # y v— w«#ig^^ois«fc*it 
[oon].::t. fiff^tt, * y >—fpffi#^ 

v h t ^ © 3 >■ riS^T* # S £ £ 

[0 0 12] £6>lctJtfT3M£f4, fitf^^iE^^J; 

-rsT^-fe^^g-rs^a-jc, #y >—ffMi5#is:tc*t l 



tt, 7^t7Mtfc5if©t©^t*fcot'b > fill 
[0 0 13] COftfT^im, 7-^77^^©^ 

tam^n o y ^-wm^m 

fix., rw*#&^/^H3ltT3MS:ti\ y^^^fcJ; 
MLJttfcSf^iai, XML7- ^t^/V— /W=Sr 

mz-^AsX-m fc /.c x m l 7 s — sr^fig-r 5 % y -/v 

«if«/£*Q ; a$rll^i-57cfe^7'7^'l'vy7 hSr 
[0 0 14] *^KJ4, 

T^-t^^ftT-foS^-^tcgiaWtfeixfoKy *s 

7-y7t, St^^ttfcjKy v'-!E5£*<D£#£!W-r5 
^•^s/^i:, St#$nfc^y->-|2xE^»c:^cD**-Ctt 

ibv&miimft^mfrb'ofa&Wm-tZx'r-yT'b. r 
[0 0 15] r^T\ *y v—fEiB^©^#Srffffi-r^ 
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tttv>5„ ^fetcrrt?. *y ->-|EiE<f 3 ©*iiii©:£ 
#a5Srf?ffii-^^Xi/^^fc*oT, T*-fc;*K#©A* 
9^- ; ?i:-frirt-saB!jiJS*SfttaiStbfc»fi'k:, MS 

t»fc^*aWB-*-5 5. IKK ffiftflgfeli, # 

»J £ T ^ -fe fF of t 5 # V v— SUN £ # h Z tt . 
T9-tx?Fff»!bti:Z#y v—aPJSrffi^S-frSJ: 
[0 0 16] /Ky ->-fEx£f ©*#Sr«Si-5 

r ©*# 5 fc «>©*&31S:iWT-r SSIg^ffl X $ 

xfiLfcJ:5fc % fiff^© = i/^— Kt^r©=i VzK 
f»*s»ff-C# 3£:#t T&*fi Ufc y * 

[0 0 17] ^y ~>—IE3$tf©^fl:SrjSS-r5 

fc4i)©«! ; a=S:fitT-r5^7 L 3'^i. r©#y v— |2i6* 

*7T-f*"F*»e>* /Ky ~> — i2x& c i :, ©^'f ! t : (cS"^v'» 

T» # ii ^£ fc fi^M 5rtT 5 -r - 9 UK ffl-T 5 * ^ 

^M^^tf-f-^^^yyt. r©*#i*^*fc»i^3g 

©m^SrSltfc^tr. ^-^#^©»#&^;£;fcfi 
^S£»ri-3*x y^b Srfttrr. £ 4rW»t Ltv^ 

&x-hz,$:m<oftL<D&ftX'h^xi>. ft!i©:S:»©MS© 

[0 0 18] *3S9m. ^y^-^ic^H 

5 7° n 9 7 ^ Sr - © a >- f ^. - * © A^J #^ 5 Sc© *I eg 

M S©? 1 — * 7 7 -Y /HCT ^ -fe X -f 5 fc * © T * -fc 
*^#3r§:t7ttl7T, r©T^-fe^g*©T^-fe^xt«l 



St, &#£*Wc:#y ~>-|Ex6^lc^:©iST-liWaT? 
tfc^fcftasfcSifr&K:. r©^fr^iisi-5fci?)©te 
a*s»fT?IiBd^5a»«:*IWrt-5ftH14:. ^o*ft=Sr» 

fc*©^aa^sfitT$Hfc^{c:, Ji?y->— isxE^©^© 

©T * -fc^fFWKttJS-r 5 T 9 -fe^ffffiSrH^-r 5 r t 

[0 0 19] ^^"C, ^a^5A|i, #Uv— bSx^^© 
^#5r^ai-5fc*©^SSr^i=fT-r-5fc>!)l^ #y->- 
ESfif fc*©*&®#iWT^Bg^f 5 A- 

©7-^7r-f/vti^ > Jt?y v'-IEig'l 3 ©*^^-^ 
V £ fc tt^lg ^fT b 9 Utt *® Oii- Z> «i 

mt. wz&*titcte : £m&n?tcib\c&mti:T9-t* 

lz ; &mteT9±xm#\ztt-tZ>T9 J £7-¥t-°J(D&llg&%: 

iTfe^ic, y*-9&fr^<Dm$&*&tia&ji*mft 

tU^5. r©i 5{-1-Hfi. rWT'ni/^ASrci — 
Klfca^e a— ^»C*5V-C» 0kW¥s^<OT9 J z^-^ 

[0 0 2 0] *fc. 3^t 0 ^-^{^ 
& Ff S©^— ^ 7 7 -f /H C T ^ ir ^-f 5 * © T * -fc * 
H^SrglTttlTT. r©T^-fc^H*©T^ir^*f-«T- 
foS^-^f-Bljiftlt^ti-fo-Ky IE56SrSt#-r5to 

at. &#£*W5:#y v— fsiE^w^^stfi-^toa 

t, St»$ixfc^y IBiBf fc*r©£±T?fifHffi-C£ 

^v^^fcs^a-fc r©*#§r«s-rsfc*©toa 

^ftff^Iffi^t5^5rfiJWf-r5toat, r©^#Sr«S 

frfr%&m*mj-$-z>im.b. rro^^s-t-sfc* 

<D&m&®.ft£tltcmz. #y V-fEs6cf©^:T©^# 

S^d^j^Si-^toat £ Jiff £-fr57"cr 9? J* SrfB 
*i-SE*¥at» C©I5«#©*^r©^ni/7ASr 

T^5o -©.tp^T'D^^Ae^atCtt), -7n9 
7A©S«^fSt UTCD-ROM^©fS!g^5r^-t- 
-t*<« W^»c*fLT*|gPJ©ft«=S:ti«-t-5Ct^ 
' WIBtfc*. 

[0 0 2 1] r^t?, IEft¥^c|Elg$tvr^57 ,, n i / 
ztfy v—|ExE^©^^Si-5fcJ6©toa5: 

^ff-r5fc*(c, ji«y5/-Ei*f©*«:sr«je-f5fc«) 
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[0 0 2 2] Sfc. *-oy-^.T'fEi6$H 
#l£t, wCDJlfy ->-fE56^gr-r5glf^(DT^-fe^S 

<omm&WVmLXfrfrZ3iftZffi% i -tZ>fr)b(Dt&m& 

[0 0 2 3] *^PJf±, Ti"lrx*f*T-fc55:# 

Sra^iitf ^a^rtT 5 *&Bg;4 s £> 3 if 5 §8^ 3 1 * 

[0 0 2 4] #3gWti\ T^-lr^M*T-fcS5:« 

£f^1-St^5:£#£:#07Ky v—|SifiSr*&W-r5¥ 



3-y^-Y-5rS*5^t;&s-c*t5, &*>\ T?±*mm 
[0 0 2 5] *3PJfi. T^-fe^*r^-efe53:# 

otK y V-IEiSSr&iW-rs^St. CrosJfy v— sEifetc 

XT?-K**ft-5l-tZ>^fkt*ffix-Z>Z.b*m&h UT 
[0 0 2 6] ^h\^t^ *^KJ±. f-^7 7-f/VC 

4frM £ tux I, » 5 x - 9 \z. Baatt - 5 y v— Srfett L 

^y y— ^ K*^^>-ht. ^gB/5>p>i©^— 

y— ^. K+^y Fi0^r©7^t7S*©7^t^)it 
^Xfc^^-^tcMiif+tt t>ixfc# y v— !Ej££rIDi 5 tti 

tf^^Sr^jrt-stfy v-wffi#st, siutts^tvfc^ 
is-mffi^&tm^mmtcvx\*mmx'% 

7^t^^ffc5f-^77^M:Mt57 
[0 0 2 7] 

[ISBJ©^JS©M«I] £1T. ISMiaffifc^i-IUfe©^ 

izm^^xz<D&wz»mmm-rzo *-r. *^pj© 

et^^tft^i-S t v *WMX\X T'r-tT.mWK^^X 
No<0 2flSX(i/ £ C<, ■7-/HS.mz.£Z>£i&t ^(0 
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SrIf-thenS^-/Hct£« U ^coP^»-f^S§kaf5w 
SMfife-CfcSWiMMiSrfflv^. -t LT> iffflSSr, *# 

a^-CWWf "C# 5 .fc 5 
[0 0 2 8] Blll±, *^!S©^tCt5<tST^-fe-^ftlJ 

%tctb<Dmx-ibZ 0 HOiaicti^-c, ##2 0 0d:-r— * 

9. T*±xft1kkti:Z>ir-?*>j:mz&toLX^5, a 
ft^2 2 OUt'-^WS-^^'^^^-C*)'?, t"-^^> 

IZn&^-fgim—'*?. 0 0©«fiBSrfiJfflT?#5r. t 
Sr{£fEi-5. ^2 4 0(iT^-fe-^.$iJ#-!J-7'v-X^A-C 
^•-f J ^SEf"7'V^7 i A2 3 0 

^flty^fA2 2 oasffiflfc-f-sir— tr ^mmx 

2 0 0tt\ 7^t7i»t^fA2 4 0l;i57^ 

mfcA^LfctK ^^A7^y^t-^4 0 0^f,^1 

[0 0 2 9] *^air— /-?2 0 OlCteSfi^tt-CfS 

*i*> ^-f«*5 0 Od^f-^f 0 0O 

^— tffgSE-^y->^xA2 3 OtdT^-fe^ LtWfA 
tcn^v-f5„ ^W^, a— • tf^SEf-^v-^.xA2 3 
Of*. ^X!7-KcD^-g-^(D#©{C<t»J. 

tX$J|lt/->^fA2 4 0(4, ^— IfStE-^^'v'^T- 
A 2 3 oa^glt&ofca^ V'tifflK^Rr 

5(0*lJ^t^Jffl-t-5„ T^-t^.*fJ®1J-^v'X-r A 2 4 0 

fc^g-fi. f-^f It^TA2 2 OlCiotf- 
^77^2 1 0fat>WimirZ>y ! -?&tHZJ:^&m?>- 



f «*s 0 0~.i£ff£itSo #i»fclM1sfco^-ctt«j4 
•T5dS v 7^t7»ty->XrA2 4 0li v tfyv'- 
!BiEroi*3§»c4.oTf4 v RJWtiSttfc^-^fc&tllLfc 

[0 0 3 0] 121214. *mfa(DBmiZ}5ttZT?±xm 
*>\ 0 2cDT^-fe^$iJ|»v-X^Al 0 0ti s 11©7^ 

t^Mi^T'-yT.fA 2 4 octsat-s. isua^fcv 

■C, #^1 0f4*y i^— i¥{ffi*i^-/W?fc!K T?± 

se* v 5 ^.— A-xh v , y fpffi* v 5 ^— 1 0 asgf 

oflt«*rif^tt5MlT?#>5cv^fefl=(£JlT» ****** 
^)«5Sfflfi*rSt©#y->-8ExBtftcfe5^»^ 

0 ttftfT-ev^-zi-Tifc t) , fitf^l6^5E ; ev ? ^-/v2 

0 \z. x vmm^mm.&'zimx'hz tmwr^^tc^u^w 
omm^mi&Mftirz,. fin^ev 5 ^— /V3 oi4. mn 

9^*Mcov^xt>^mE-t-5„ Sf4 011!iy-^KJf- 

^y IEigSr*&*ALTV^5„ 4*3. T^-fe^.©JffiI->^ 
y^l 0 Oti^v-f^— ^ICTH^^tb. ifE^v 5 ^ 

[0 0 3 1] Hl3tt, Hl2^l^$ttfc. 
10, 2 0. 3 OfcAffl***!,*-?*— *©rtS«rj£Jt-f- 
5f-7*/VT?i)5. 0 3 Sr#flB.i-5 i: . jKyv'-ffffi* 
^3.— /H 0»CA^J$tt5T^-fe^f|*l 1 0, 130 
WflSsfcli (Subject, Object, Role (or Uid), Operatio 
n) XthV, XV 5"— fWHt^a— /W OA^flff^ 
^SE*^3.-/V2 0^btt5*a5**cOltffil 1 3(D 
«^f±**y^.h {Condition-List} T*fci9, ^?T««B 

^SE^ev'^— ^2 o*»e>$ifr*^=.— /V^3 O^^HS 
idffJg^l 2 l(D«^«fitTSrffi^-r?)X-^ir-y h 
{Instruction-Set} "efcSo # y v— 

3.— /n oicti? y y— ^. K=3r^^>^4 o^bSE^m 

$^5JKy ->-|ExEl 4 0 il©7 i -^77'f^2 

1 O^fef- ^fStyy^f A2 2 OSr^-U-Cfl^ 
v?^.— /W3 0— i£<b*i3:£§l 34t, tdfT*^=.— /W 
3 Ofab"?— ■? < gm.V-Zfi/*=rJ»2 2 O^LTf-? 
77^^2 1 0^jHe)tt5M«fffl*l 3 3tliXMLJ 
* (XML Document) "CfcSo tfc, /K y |f{ffi* v'a. 
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-/V3 OfrhZfr^httiJlZtiZTf-tx^ftvIl 1 
2 . 12 0, 131 ttT^-fe^S*»C*H-5^Fff^rSr* 
i^T — #50 (a string of "denied') Xfc 9 . aKjJS/— 

»fls*^a-/n od*feta*$ix5T#-fe^ff^ri 1 1 

ttT^^^R^K^Sff^^grr^—^JII (a string 
of "permission") Xfc 9 > ftfT^v^ — /V3 O^tH 
*Jtl/5!/y^h7^3-Kl3 2ttHTML, X 
ML^Xf^-^JlJf (HTML, XML, string, et 

c.) -efc^o 

[0 0 3 2] gl 4 II. HI 2 Id* Lfc*|H|[0»«fca3lt 

— 5g<D#yStt, If— rt^c^T^ir*^: 1 1 

ao^-eflfrJtOlfctf^ya— /V3 OK J: 9 -&Wlc«fr 
£*u5T^ir*^#l 3 0\Z£VftMffy\zmW}£tlZ>o 
T^txgtno, 1 3 OfcSttttttSi:. #y 

fcttJS+atfys'— lffi*i 4 o^y y— ;* K^^^h 

1 4 0£rf¥4ffi-r5 0*7^ 7" 4 0 2) 0 ^IX N ito 

#y s/— ibjsi 4 o^^<o^#^ffiprffi-efc*tfi, -t 

^frWl 1 2t^5ft**, SS7^t^g*l 1 OS: 
SSfTLfc^— iflClU^-r^ 0 404, 

4 0 5) o 

[00 3 3] :Jxl:ML, .^y IESE1 4 O^fC/K 

y ^-wtt^^^-^i ofcttTMiWffix^Jtv^^^ 

^Ifffill3^^ (7f^4 0 3) o fit? 
«S6#SBE^> ? 3:~/V2 Oft, v^^i^iC/SS^X^ 
Sftfr^ev^— /V3 Ocoy ^ hSr^oti/^o -t^X, 
»ff«tBtfeBE*^a.-/u2 0tt, ^SP*#<D^*l l 3 

«ltT*^a-/u3 OSrttSR-TS (^^^4 0 6) 0 * 
LX, JgSft$tfr^i^--/v3 O^jLo^bft^ofcii 
£\ T^-t^^FffpIl 2 0 £^5ft*«rSKT#-fc*3S 
*1 1 OSrSSffUfc^.— !fKia«Fi-S Uf5//4 0 
7. 4 0 8) 0 

[00 34] MSttftffi&ft&fftB USfcttliaT? 

ATfm&&ftt>hZ Ur7740 7 v 4 0 9) 0 *tf? 

-&f*. y y-* h^v*^-Kl 3 2*suj$tt5t* 

^Ky >— ffffi^v^ — /VI OtcMoT, ^b^tfecD 
*y^-lB3«l 4 0<Offf«36^ttT**t5 Ur^4 1 
0) o tLt, S^WiC/Ky i/-E3fti 4 0CD*<D±X 



o»c:*5v^TtH$^fcy y— * 

3 2i*lcT*i?*fFpTl 1 1 tv^5Je*S:a 

^^Fffpll 3 1 fc^5*S*&3RT***5^1 1 OS: 
BfrLfc^-tffcEMrrs (^7^74 1 1) 0 

[0 0 3 5] nt% ftfr^v^ — /V3 0T*<DXm\Cto 
^X, %&ft&&ft&ffitctt&K4&<DXm j $>T?±X 

*5«fc»frtt:; T^-ir^^l 3 0 £#y v— .fMB*^ 
.a. -/vi ol^trbT. WfWl:WIS*5r h&XZ 
So r<o±9^. ^Sl5*#S:«fci-fc«)lctT^tt6WW 

r^^^rtm^o ftfr^v^-zv 
3 0lc:Jo^X. Stt^»^Sr»fc-t*fc»KStt^-1f 

[oo3 6] m^, m* (D^z/^-Mzm it, $stgs: 

{c J: 5 iff y v— ©WfliT/v^ y X 7 a 

■Y—bXhZo H6KtfB7tt, *y S/— ffHB^e^a— 
/vi otcAm^/^tv^^-#cD^^— -^2/ hXtm^tS 

*S*1 1 OSrA^LX^^-^Srgtfl&S 
^501) o T#ir^^(DS^ x E16(DT^ir^^ 
*OffllS:#fia-r 5 1 , 7^-t^Srg*t5i# tf 
ft if) SrfiBSU-t-i^— #-C*>5 Subject T^i?* 
WftSTMSiJ-rs^-^-CfeS Object t. T?*txtt& 
^«i-5»f^Srtt»Ji-S'7 f --#-e*>5 Operation i £ 

— # ti* :^7^-#tt, rsubject^obj 

ect(C>Pf LT0peration(O^«iPfi(T # i? ^«l) S:S* L 

^M^I5^^tuTfc«9 x Subject^Nihon Taroh/IBM/J 
apan"Cfo 19 . Object ^http: //admin, trl. com//form/exp 
ense. xml"C$> 9 „ Operationd 5 read(html) ct 5 ft 

T#ir^g*:d5ft$ttfcr i:S:^UT^5o r.(DT^ir 
^S*:fi TNihon Taroh/ IBM/ Japan 1 1 ^ 5 if * X* n 
>- Lfc^.— If ^5, admin, trl. comif — ^fcLgjtoftrC 
V ^ ^> expense, xml t V ^ 9 7 r -< MUX. HTMLJF2 
5«-e<OR**9S:iJ*i-5j ^ tSrS*L.XV^6 0 ft 
*>\ ^rtliA^5r7^t^g*l 1 0 t Lfc^\ ftfr 
^v?^— /V3 0frbmjj£ixtcT?±*m$:i 3 0S:A 

[0037] yy-^K*a^yh40©tttt 
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#1 £ tlX l> -5 T ? ± xfflWm (O # <J v—IExg© ^ , 
7 * y — ^CD^T(D^7 * — * (Subject, 
Object, Operation) ir-g-&i~3£IEIJ£rt&3S-t-5 (*7" 
^50 2). -^rUT, ^WLfcTK!/ v—gyWl 4 0£ 

pfaL— rSr^'ii-Sx— ^T-feS Subject i, T^ir 
*lTW#«l£§£8'J't57 J -*T-fc£ Object i, T^-fe 
^fF'5I^f^5ri^SlJ-r5'7 ? — 9 Operation t , T^ir* 
Srlr^-f 5*ftWf23£T*fc5 Condition tSv^y-- 
^i-TSo roA7^-^ft, rConditionW^ft^SI 
S^ttfcB^, Subject^ObjecttC^fUTOperationCD^f^ 
*tESSri#oj tV^/V'-^Srigc^fe-t-So 0 6 left 

* y V-j&fllJ©A#WiEi&£;h,T:te <9 , SubjectrtSemp 
loyeet?$> •? * Object# 5 http: //admin, trl. com//form/ex 
pense. xmlt?$> 9 , Operation>JSread(html) 9 > Cond 
ition^transcode (in, out) X*$>Z> X ? tttf V is—18M 
5r*LTV«5o Z<D7$}) ~y— Slljf4 r e mployeei: V"> ? n 
-/V- (f*— i?lcT^-fe^-f-5fcfe<7)»tS) Srfcofc^- 
If^fcttTT'y -ir-i V^LT, f-^5rHTML 
JC^-f- 3 r t ^"Ct t) , admin, trl. comD" 

— ^dg^tbTI^Sexpense. xml ~7 T 4 MZ-tt b 

[0 0 3 81 ^rt, -£-&i{4. Subject, Object, Ope 
ration^Oll^^tt^ttS-e-i-S £ £ Xh 5„ 05*- tf > 
T^-fe^WffiS*^7^— ^©Subject** *amano' ftib 
f4\ T^-feT^feW^y v— aaUW+T* *amano' £v^5 
a-f ID^ 'amano* iSrttfTRLtV^^/l — :/£ 

[0039] T?±xfflm#v ^-m.mv>&mK 

y-* K^r^.^ >- K4 OtD^IC^^tVTV^^^^- 

3*H<D?IJ^ J H£;l:<D : >!i-e#>5 Environment 
^— #ti~Z> 0 Z<D/<9*— ^14, rEnvironmentfl^ 
y V-fg«{CXt Sr**?"*. 0 7 

£»4, S^X— 9<DM,fcM&&M£in,XtS?) * Nihon Ta 
roh/IBM/ Japan t V > ? 3.— tr*f4employee tV^n — /WC 

SrtSr^LTl^. ^<Dm%£7— * 3:12] 6 cor^ir* 

^jfclCfcSNihon Taroh/IBM/ Japan £ V> 5 !f * S ^H y 
V— ftllj ©employ eet 0 o — /USr t> ofc^-— If £ 1/ "> 9 

[0 0 4 0] mSll^SE^at LT, ^f?y5 0 

/50 3) . mZ-ti. ^y->-^SiJtrffi5feS^5£$tv 



xi,^w&n%<vm9GmmizjEL<fiffii!tiz> x oizm 
-a: 5 1 1 ^ /^-/^m m l-ok y v-^iy s: - o\^m 

ffi^JciT 9 ± * Srff W VX 5 r. t SrBSJhi"5 r t *s 
5. -&Sc Lfca»J*s* v ^o®* 1> r r X-Mfc-t 

[0 0 4 1] Xr-7 7"5 0 3 T?*&S£*bfczK y V 

-^I"J©*^5rffffii-S (^7y/5 0 4) „ ^y^ 

—m.m<o3kwn\z y y— ^ k^=.^ ^ h 4 oic#&i-5 

fit^ofc^^lExE^ixTV^^-, ^^y y-^ K 
^^^Vh4 0^b^S-r5fil?rlt9tb-ro S^^gB 

tocfj-Cs y y-* K*a^ ^ ^4 o^bS9iii^ti-fcfit 

[0 0 4 2] ^7y/5 0 3 ©fMB»*Sr*J3eL. 

^-C^Ktffffi$*t?>^»iT^-fe^fr^ri:-t-S (^x 
•yZf5 0 6) ^XCDgzftfrmmvimX'ibQfro 

Slfg^liE^ 5? ^ -/v 2 0 ^aSr^n-T 3 (^7 5-/5 
0 7) „ ^gB^#W»^»±, E17«^-gC^#(Dffll^#RS 
-f^i:, *y V-ffit-^a-yH 0rtT-*T-fc3^if 
5 ^^^©^H© y ^ h"Cfo5 ExternalCondition Sr 

^t-rs. ro/<7^-?it fT?±*&m 

y v— ^IIJCOConditionWf'T', S*^— ^^», ^y 

*S:t^^ y i/-m.m ufc^*, tk y ->-smb* v? 

a. — 1 0^t> flff ^tg^BE-t v 5 ^- — A* 2 0--, expens 
e. xmlSrHTMLlC^-TSr tftX'% %>fr¥ bfr*M 

—;U3 Ot-iSWrSISraTff^y V— Wffi^v 7 ^— /u 

2 0 4fcttflfi : ^^^-/i'3 0tC*5V^Ta^gC*#Sr 
#y v— fFffi^v 5 ^.— /H OJcmSr t/j:< T^-tr^Tp 

[0 0 4 3] 08(4, &*7«Sg&SFe S?*—^ 
XhZo 09(4, fltT«ltB^EE*v J ^-/V'2 0^^v%^, 

^-^©7*— ^.y h&mw-fzmxhz. msz^m 
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L-CS»^tvT^5ComponentcDtf#Sr^a-t- 

y^"8 01). ifrti?a-/l'M r-j6»e>Srtft-5*lfT 

^WtT^-fe^SI^W^aST'feS Condition E 
xpression 3H$Sr*Q!g-?# 3 a ^ hCD^I* 

£^1" Capability t v ^#^^31-^ => VtK— ^ > V 
Sr^i" Component Name t v ay*-^y KD?ISTi) 
5 Component Argument t ^ — ^ <ti~<5„ III 9 K: 

ttWft^a-/i'3 0 tc|5i-5tf «©**«*S|E«$*t 
TJo 19 v Condition Expressionj5*transcode#type#l (*. x 
ml, htmDT'fct), Capability Check#Available-T?$> 
•3, Component Name^5 c :¥tools¥jar¥enforcerl. jar~C<fo 
U v Component Argumentd s c:¥enforcement¥transcode#t 
ypettl.xslX-fc^i^^m^^Ei-S- t^-t 0 r 
Officii Ttranscodefttypettl i ^ 5 fl-&5£:#£$§/Ll-En 
forcement^^^fij^ p]-ggx*fc 9 . enforcerl. jar t V * 9 
Zfnjf? AKltranscode#type#l. xsl i V 5 ^7 7* — ^7 
7 4 fr^TLXT'—* Sr*aST 5 r £ ic £ 5 *#<7)H^ 

10 0 4 4) fl-SB£:#t ITAA Lfc«ftW*# 

2) „ fLT, ^77^8 0 1 -C?^#LfcCondition Ex 
pressionCD^Iw, ^x -y^8 0 2 XWl 9 tU £*Wc3M$Sr 

5-/8 0 3) . ^©<t5^^>hy-^fc5#^l*, J? 
fc&W^M* £ Condition Expression^ CDf$-g-S:ff V\ ^ 

«iSSr^t)3gi- (^7 7/8 0 4) . — 

y— #&2»>ofc^f4. Tf-K^n-sjl 2 OSrfflTJb 

[004 5] «±tf> J: 5 K L-C. *«B&ft 
X<D&mz.m UT-t©*fl=SrSIA:i-at^ h y -^ffl$ 

^Wffir £> „ ©ftfT^e v 5 ^. — /v- 3 o — ©ftfrJi 

ii2 l utrt^a-zn;^ ha^S^tb;* 

ttfcffiSfcJott^Component Name t Component Argument 
om*-&tz>it%m%t;<D!) X ht LXffif8.Ltch<0-?fo 
£>. t^JX-fi, ((lotusxsl. jar, transcode. xsl) (domhas 
h. jar, signature. xml))"C?fo5 0 
[004 6] 01 012, ftfT^ev* =.—^3 OOi^W?: 

/i-3oii, *#a*/*s»*«ai*a3 1 1. xsl 

A3 3 i£r{i;t5. S^ii^/^K^^m^S 1 
14, XMLiSICfctt^S^^^mSrff oUftZ®. 
ffl-rSo XS L/cHr;,-^3 2f4, XMLT-^t» 



A'-A'SrR*a//-C*f it* XM L^-y Sr^i-5S* 
W-frXhZo 7^^yo^7A33l±, XSL7 

3(4. f-^77'f^2 i orotroxMLJfl:jftLT 
*>3«0>aaMM£fcifcU SJ©XML:fc»*£jfc-*-5*J 

gtfTJt^l 2 1 f4, XML^tS^^t-rS^/t—^SriS 

[0 0 4 7] 01 1 (4, fdtr^-^a.— /P3 OlCfcSftfr 
feaS:lft^-r5 7a-^-y-NT*fc5o ID 1 1 
5i« *i\ #S&*/'aeH#*fctH*»3 lfi. XS 
LT*sBxB$ttfc^>'W-/V (fltTJg^l 2 1) §r«W 
U ^»*T-fc5XML5C*l 3 4fCMLT»^iZ>^ 

7i ioi) . fitf^e^a— /W3 oictsgyi 

^*f*T-fc^XML35:#(4. ^-fLtT^-fe^^jRl 1 
0<DT^-fe^.M*T*fc5i:(4PS^^V\ C»Jx.tf, T?± 

»t5te©77^/vefc5i^tfe5. ^tb(4, 

0iJ^.f4»*5:#l 3 4 Kf*g*i$i;r^&A'-/t'£rigffl LT 

ri^tj^ofc^-ictt, *y f^ffi^e^i— /n o 
^-7?t7f *1 3 0 5rffot^l^b«5 (X7-y7 
1 10 2) „ -t- UT, ^y v— fFtt^-v 5 ^.— /H o^r 

7-yrf\ 103). 
[0 0 4 8] sKy v— fWev?:*— /H 0(C4 t)T^-fe 

W^a^5t;lCti?U, fc^i/M4-^-^lcMLTfro 

fc^aasry y— * k^^vm otc##M$-rtc 
7^71108) , &&<Dmmz.9mvt^z.h*mtWi 

tciifc] UfyT*! 10 9) „ 

9-, a^#<ofF«*fci4nm*^Fw«e-c*)9, 

ftSr^trT^-fe^e^jpffpri 3 l 

[0 0 4 9] V-ii^v'a-yHOlCiOT^t 
^^ffBr$jxfc^g. ( i^ XSL7at^t3 2^ 
M^T'fc?. XML SCMI 3 ACD^^'ffb yzT \ 

10 4). Ifc^b^S^L^coJ;?^ fl^i:LT©P 
•l»iie^R*S:, XSL-CB:SI5x6T't^V>^a-(4, XS 
L/ntyf3 2^J;oTBt^b J ?>gA^L<OfcJ6roJg* 
©^^tXMLjf 1 3 4tC|f ALT*J<„ fit, 
Ht^W^Stt, lS^7^/^yp^7i.3 SKX-oX 
fto K^T-y-fl 10 5). 

[0 0 5 01 ftfT*^ 1 2 1 ICB* **tfc^-CoaE#l& 
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106, 1 107) o XSL7 p Dtiyt32t7^;^ 
^^7A33 J:oT^$ixfc«ltTflF*XMLX» 
?—9^ 3E*H*«1 3 3 t LT, f-^flty^ 
TA2 2 0 5r^Uf-^77^f/V2 1 0IC*#M^tt 
3£\ ifcfiy * N7^a- Kl 3 2 t VXT? 

±xfr*i<om&i 1 1 tmcT?±xm&i 1 ooiff 

[005 1 ] *HJS^fi§Srffl^fc^W**Jfe 
^ KSr^L-Ciiff-r ; 5^i:^V>5o XML 

ff#CGQ <fc 5 l-lE2>$tL3 0 acl(*, role (employee), doc 
(http-V/trl.ibm.com/xmlform/X), read (Form)) <- tr 
anscode(X, xml, Form). 
[0 0 5 2] Ci-UIMU JK»^ft:7*-A£HTML 

So 

?-acl(amano, role (employee) doc (http://trl. ibm. com 
/xmlform/ travelExpenseAccount. xml ) , read (html)). 
^<DW&. Subject**!! i/—Bafi, T?±xW*=&\Zt 
ole (employee) X~ St U T * -fc :*^:fctfX)bject*doc (h 
ttp://trl. ibm. com/xmlform/ travelExpenseAccount. xm 

1 )X\ *y 8B3*<DObjecfC*)5doc(http:// trl. i 
bm. com/xmlform/X) |C^-$tt5 h<0<0^ 0perationXi><5 
read (html) \Z$t LTtranscode(X, xml, Form) t V x 5 Cond 
ition*fi-ttbixTV^O-e s * y V— fftiB^v^— /I/ 

y V— fKB*S?a— /H O^bfltT^tlg^lE^-v^^-^ 

2 0^e>tt5^SiJ^f1=f±, XML7^-AJrHTML 

jxtf T * i? * §rfF pJ-T 5 £ t * 5 *frt**> 5 . 
#J ft<D £ 5 tcfSSS $ 5o 

transcode (travelExpenseAccount. xml, xml, html) 
[0 0 5 3] Lf:^oT, 1 0 0 

*XML"t»E3fi$ixfc»«7*-A*HTMLfc*S|-t- 
SftfT^v^ — /i^3 0£r^oTl\mi, T*1r;*jJSif ""I 



(D7t-Af-^^IttS/Tffl(7)HTML7-^S: 
dfcjfc-*-*. ^UT, 4*StLfcHTMLf-#*a«7 

[0054] Rfc, ^mmmm^m^^xxm^m^m 

#5 0 *y 5/-E*fc LTXi:V>5®^* 

^*rffFTfSi:v^5*fl : *«*UX*s<. SrS" 

acl (user(ID), role (subscriber) , doc (http:// trl. ib 
m. com/image/X) , read) <- embed (X, ID). 

SS5!Ei6-e^ftt^*frH:, XSL7 p Dt 5 /f3 2lC;fcv* 

[oo5 5] #^ *%i&<Dm&*m^x?—2^<o* 

^i/-> 3 y|:|Lto^ (log) >^r^/^coS#^ 

^Srff ?%mm\^^xmm~z><> rmxmw&ft? 

isXT&K&^X, rt— f-f y^>f (Wi£Stt) «r 

acl (user(ID), role(issuer) , doc (http:// trl. ibm. co 
m/xmlform/X), write (*)) <- status (log (ID, issuer, 
X, write, T)). 

[0 0 5 6] rtt^MU *©J:5*T^-fe^K**« 

?-acl(amano, role(issuer) doc (http: //trl. ibm. com/x 
mlform/ travelExpenseAccount. xml#linputf ield) ,wri 
tercost=$100")). 

Z.<Dm&. Subject** yi/-lESE, T^^^^**tCr 
ole (issuer) X—gt T 9 ± ^S*CD0b ject*doc (htt 
p://trl. ibm.com/xmlform/ travelExpenseAccount. xml# 
linputfield)T\ * V IBJECO Object Xh Z> doc (htt 
p:// trl. ibm. com/xmlform/X) IC^^tV^tCOO, Opera 
tion-Cfc5writeCcost=$10(O ^^1" LTstatus(log(ID, 
issuer, X, write, T) t 9 Condition* frit btuTV ^ 
^ 0 ^ status&UT<D ft/Is— /IsXhZhCDk 

status (log (Sub j, Role, Obj, Op, T)) <- log (Sub j, R 
ole, Op, T). 
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status (log (Sub j, Role, Obj, Op, T)) <- makelog(Sub 
j, Role, Op, T). 

^^clog^^9^x-^fi#^r^tbTV^ 
KWV, status^ 1 (D/V-/W±*Bfci-3o ftt, 
^ 2 (7)/W— /IstmKl £ flX % makelog (. . ) &0kft tfrZ 

[00 5 7] makelogO^Sr^Jtfcflfi 1 ^^^— ;V3 

rcoT^-&^^*l 3 Oft, «*.tfftOi5fcfB36**t 

?-acl(sysl, role(system) doc (http://trl. ibm. com/xm 
lform/ travel ExpenseAccount. xmlttlog ) .write (log (a 
mano, issuer, travel ExpenseAccount. xml#issuerFiel 
d, writeCcost=$10(D)). 

:^(07^t7S*i 3 0lt S£#ys/Hftfl!J«:SKB 

[0058] H^o ^£Df#^^afi, h^V^ 

(X S LO«ifl;^©»t*fcftoT^5) 
T^fiNlCSftLt*5< ft rtttt'GR Head"* 1^5 SB 

-ea A/K&sub ject ; (DUfti*. m7#m<omftf$\cmj£ 

T**>5o tit, &Subject;cogi5^S:||^(D^tt^^l- 
5:fS:XSL/Dtyt3 2T^Sf ; 5^ttcJ:i9 > 0 
[00 5 9] JSfeld. -^HJScOJgtlBSrfflV^T^IIB^ftf** 

eieicov^Tiftw-rs. -eo<t 54#y i«mft 

#W#T^^^ff pI (Temporal Authorization) b B?f£tt 

acl (AnyUserlD, role (employee) , doc (http: //announce 
/bonus, xml), read) :-get#time (T) , T > "1999/06/0 



3". 

^ttfi, Temployeen— /Ix^ifo^x— If http://ann 
ounce/bonus, xml £\ 1 9 9 9^6^3 0 ft b flrea 
dttPSSrjtOj tv^E*-Cfe5o d0>»£\ get#time 
v'^T-AiSS^ia^E^JSr**, 1 9 9 9^6^ 
3 0 ± 9 fcl4?)^WSfc$^ employee fibonus. 
xml|CJtL,"Cread«|RSr«For.i:*S-e#5o 
[0 0 6 0] r©J:5 4T^*^ff^IS:lltTLfc»*, 

^l^^^employee^read-e#T U"£ ? 0 readT^-fe^ 

[0 0 6 1] rttfc^U *iaSo?g«8S:«fW*ft : f*# 

acl (user (ID) , role (employee) , doc (http r //announce/ 
bonus, xml), read) status (timestamp(S, T) ) , verif 
y#signature(S), T > ~ 1999/06/03". 

[0 0 6 2] ST, TKy i/HPWtS^— ,v\ otc*^ 

SK^y i/— !B^ffFflfi3rfT 5o -^"e> status(t 
imestamp(S, T))[CB| LT&O/W- A^fEiS SttTt ^6 t 

status (timestamp(S, T)) timestamp(S, T) . 

status (timestamp(S, T) ) get#timestamp(S, T) , make 

log (t imestamp (S, T) ) . 

timestamp(S.T) #4 ^f±, Sfcy 

y-^ K^r^^ y h 4 01^^HTV^^V^T% st 
atusCOgl 1 <D/\s— /Hi^f^o ^LT, » 2 <Z)/V— /V 
#*5iiffic£i%* get#t imestamp (S, T), makelog (t imestamp 
(S,T))*S^tft5^W#T^-fe^fF^ri:ft5o veri 
fy#signature(S) fcT > * 1999/06/03" \^ /KUV-ffl 

tt£T?±*fF*ibteZ> 0 *3»ttt. get#t imestamp (S, 
T) N makelog (timest amp (S, T)) % verify#signature 
(S) % > "1999/06/03"^^# i i3t/j!o 

^y S^-fMS*S?a-^l 0^fefl?T«lfig^flE^^ 

[0 0 6 3] »clc. »tT«ffi*fE*^-^2 0fcfcV^ 

/i^3 oo^Sr«liET5o ::-e, 3m«IS1£f£*v^ 
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t^ir-f^o Ell 4 ICSct^— ://W±* Condition Expr 
ess ion-C*S $ tbfc ft § 5:Jait^ 5 ftfr^ *J ^ 3 
OOWS, ^tWOfST't £tWT^>^— A' 3 OCOCompon 
ent££^Lfct>O-Cfc5 0 g) 1 4 (D"r—~/ MZ.^^ 

makelog/HL 1 3l^inakelog^f§£E*-r 3o fo 
rmula#expressioni: f*. MigSft t'^&tt&^M 

— 7^3 0^ [timestamp#processor, gettttimestamp 
(S, T) ] % [log#processor, makelog(timestamp(S, T))] ^ 
[siganturetfprocessor, verify#signature(S) ] v XTJ* 
[formula#processor,T > "1999/06/03"]) ^flfffe^ 1 
2 1 £LTi£ib*b5o 

[0 0 6 4] fl^ev^-^3 0K*3^T, 

get#timestamp(S, T) IZft-fZf&m 

get#timestampf± v 94 J*7s9^rf • T^n i? *) 

9^^TMS^ P Cl>/^A^j2^^^ ^ x^/^S 0 gettttimest 
amp(S, T) get#trust (timestamp, C), get#timestamp 
(C, T, S) . n r -e, get#trust/2f3\ *f — ^7r>f^2 1 
0*^trust<OEiBS:8tt)tai-iSIS-e*>5o CT^tf7C<0 

trust (timestamp, "http: //www. surety, com") . 
ClHfiv iStilr^tiniestamp b U T "surety" 3Htf ffi *t~ <5 CI 
i£r;i*i-So ^77^^2 10^^X114 15: 
^LtgftLT, get#trusto£«Cfctt, "http:/ 
/www. surety. com"^fi]i9^x?>ix5o Z-<Olk. gettftime 
stampiE^tC J: 9 s Surety Timestamp Serviced £>&$glj 

2 l <DMctiXD0km*m& Ufc 0 ft. *3BK«fcj3V^T. 
Timestamp ServicefiSuretytcRB^^S C t £ri£#c Lft 

[006 5J makelog (timestamp (S, T)) fca^SfeSL 
makelogfi, P ^ - 7"cHr i/IHCj: 9 MgSrtT 9o * ^ 

9±*m& 13 0 S:38frr5 0 

acKsysl, role(system) , doc (http: //announce/bonus. 
xml#log), write) 

fit, SStfy >- aBlJSrl¥«i-ar4:KJ:o-Co^ 

1 0 0iSn^K:*#a*SrS5*IRS:»o|fr&, fkfr* 

?>T^-t:^fFpId5^^H5o -tl^iO, makelogfilog 
(timestamp (signature#value, 1999/06/04)) <D9 4 A ^ 



[006 6] verify#signature(S){C?t-t-^*n ; a 
verifytfsignaturett, S^&^nir y & *) Wm&'fr 
bo 94 A^V'r/oS^tt&tfclEU ValidftibH 

GEU*»*) % Invalidft^ (»ofcS«) £S 
i\ fc4b\ Surety(OS«ffittValid^i:fi[3&i-5o 

[0 0 6 7] T > "1999/06/03"(C*fi-^ft3:a 

A^^V^O^J^ffi. "f*to*>1999/06/04-e*>5 o - 
tttt. T > *1999/06/03'3fe<D-C*aaJfe*t LXM (jE U 

[0 0 6 8] Kit J: 9, »fr«tt^IE*S^-/i'2 0 

J^feWfT^S^a — /V3 0— i^ibiWc. get#timestamp(S, 
T) v make log (timestamp(S, T)K verify#signature (S) „ 
RZFY > "1999/06/03"<D«-ftf7j§*l 2 lli^TXt^ 

td^ol^'C^5}t^tV^: > acl(user(ID) f role (employee) , 
doc (http: //announce/bonus, xml) , read) ^^#t±^"C 

[0.0 6 9] JftflH-RWUfc^FlWAf^T^-fe^ 
&r?94 i^^^^^Oflfi^igJp^i^XV^5o ^^^^^ 

<D 9 4 A ^ 9 is 7<0 m & n K fe 5 t 5 r. t 
— Sffi^v 5 ^— ;H 0-^flff^v^^— ^3 0©y7rA 

[0 0 7 0] 

IE9 2] ^laSo^tfifctJItST^-fe^Mfli^^A 
[03] T^-tr^Sa^lV^xAO^v?^— /WCAI±J 
[E14] T9±xfflffl*sXTJ*&T9±xm&&f&M 



[06] JlfV v— #fi*5? 3 -;n OlcAttl^^tv^ 
[07] tK y v--fftB^v^-7W 0«cAttl^$tt5 

[08 J ftfTttttttE*- ^rr -/U 2 0 IC «fc 5 ^tT«IB 

[09] *fTMB1ME«i?a- /V2 0iiffl^5f- * 
[010] fitT^-^=L-/w3 O(D«fiS;eiJ§r^i-5 0 
[011] ftfT*-v^-/W3 OKiSftfr&SSrt&K 
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[012] f-^^Ct^U— > 3 ytiLtn^7 

± 7. ay xx >f Srgg-f-fc tf>©IEi£$:t&9H-5 0T-fc 5„ 
[013] 012 ©BSSKyS: D"t5:»IC n ^jjSii^D $ 

[014] »fr«lffittBE% ^20 a 

t5B-e*»5. 

1 0 • #y v— fFffi*i?*-/K 2 O -$fcfT*8t&l£§E* 
v 5 3.— /K 3 O-gtfr^ev^— 4 0-!) y— X K^r 
=._*>-K 1 0 0 -T^-lr^feiJffllV^^A, 2 0 0—f* 
—fgMV—'*. 2 10-f-^77^f;K 2 2 0-f 
-^fit^i/XfA, 2 3 0-3--fl|[t7'->'^f 
A, 2 4 0- ■-T^-fc^fWffill^v'^'rA 



[01] 



230 




-210 



200 



[010] 



31 > 




XMLX9 

^30 



.32 



Wr£>?=L-A ^3 3 



-133 



XMLAf 



[Hi 2] 

XSU=£&Eiinfbrcem»rit&&<001 



<»l:ta*latc i»l«Ip-/-> 
CksI icqrj) 

<x*I:i»li-l«Blat« 4Hlect="*|«*|cnm«tO 1 0 1 0 |ttxtOV> 
C/ul:capy> 

<x*l : f or-eteh sat etl^W&rair (PirtiJbi»t =0 IW]}"> 
Part* Brae © Held 

Onntitr :<ul:vajg0~of MlBct=Thiintity*/> 

Del ever I y th»:<ol:v*[ue-of ulact~D«-l lv«rlyQ>te7> 

<A*I :for-tacft> 

</Ua> 

<fct:t«vlata> 
</xil:itjleihcel> 
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[02] 



11V 



110 



10 



100 



113 



140-^ 



130 



*-feX 



40 



^-121 



133-^| |>-134 
3£*H*tt X» 



120 

jL 



131 



7" K?>X3-K 
132 



[HI3] 







DataTypa 


Components 


Access Request 


(Sutyect. Ot^ect Role (or UtdX Operation) 


ExtwnaJ Con Jlioci 


(ConoWon-Ltet) 


Enforcement Instruction 


Onstruction - Set} 


Resource Retrieval 


XML Document 


PoBoy Retrieval 


XML Document (rule syntax} 


Resource Update 


XML Document 


Access Deny 


a string of 'denied" 


Resource Trcnsoode 


HTML XML string, etc 



[014] 



Condition Express Ion 


Caasblllty 


COBPoaent Mine 


inks tog/I 


O 


losLProcsssor 


get_tlnestasB/l 


O 


1 1 Bellas© j>roceMor 


serif*_simiture/l 


O 


sis»iturijrocBX«Dr 


foreulai_cut press Ion 


O 


fonula_procassor 



[04] 



C 



401 



3f«'J->-I2ai140*fHB^ 



404 




405 



408 




war. 



408 



Li. 



7SH?X*3rW120 

asm-*-** 



7*-fcXfTOl1l£ 




c 



*7 



3 
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[El 5] 



[06] 



C 



AftLT/O*-**** 
TO. 



506 



E 



L 



I 




'501 



502 



'503 



'504 



508 



r«o ( gggg ) c^z) 



query(u>«i00imTvvii/IBM/'ttapnX, 



if. 



Opsntionc raadfoftmO 

out) 



Loom 

TarrfumL Format). 



[071 



[@9] 



A&* 



• JMtM: 



***** 



-r— — V^K 



5»»> jK'jv-M^a-jw&^^AB 

uponxuanl * htm) CftHt^tf-rt^if3M« 



AiUA 



CapabiRy Repository 

(fMrKfcL-jwofcB 



Condtton Eipraaifafr *fW#7 iHtAjS*©*^ ft. 
Cop.!*** *«*«W**^*K-*>K&«I. 



• J*f*W: 

ComKoo Ejqm* 



Nwk e:¥tooh<l8ii¥trf<)ittrtjT 
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[08] 

( ■» ) 



[min 



Compc«©iit<DfR1B£JW* 




'801 



-802 



^803 


805 

} 











1101 



1102 



1106 
1107 
















1 y 





1109 



II 3] 



<0rdertJ$t> 
<Drier> 

<Ptrti«im>&lBdlB Hotor</P»rlt«eBe> 

<P»rtsNo>M M</Pirt*Bo> 

<ProductTypB>yicro Drlvt D-trPB</ProductTypa> 

<tomt I ty>2 00</ftjintl ty> 

<0c I i ver I y0 ite>1 889/Ofi/Tl </De I irt r I >0ite> 

</0rdBr> 

</0rdBr> 
</OrderLlit> 



40r*rLUt> 
<D«ter> 

<Pirtsli-a>5pindU Hotor</P»rtin»B> 

<P»rtslp>liS4</P*rli«o> 

<ProduclTypeHllcn> Drive Mype</?rodoctTjfpe> 

«Quint)t»>ZDO</Quntlty> • 

<0el I var lyBito>1t»/Dfi/21</Del Ivar I yfi«tB> 

</Drder> 



</0r«er> 
</0rd»rUst> 

Qjog dlscloiedta**XYZ Cor*">-| 
P*rtt Rm :G» Hod 
(feint I ty :Z00 
DtUvorlj Du9:l999/0a/t1 
Ptrtt Rut :GR Hsad 
Qiant I ty :300 
DtUvarly Du»:1 999/07/21 

</U*> 
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(72) am mz. 

1*1 

(72)38IJ|# 10 

1^l|JIWeftffiT«Bll623#iftl4 B#T 



(72)3g?S# 3^ 'S^: 

«^JI|**fbrtTT»IB11623*ttl4 B#T 

F^ — A(##) 5B017 AA01 BA05 BA07 BB02 BB10 
CA16 

5B082 AA11 EA10 EA11 EA12 GA14 
GC04 



